Access violation vulnerability in Product Filter by WBW 1.4.9

The Product Filter by WooBeWoo plugin for WordPress had a security issue in versions up to and including 1.4.9. Without the necessary authorization checks, attackers who were not properly authenticated could do things like create new filters and inject malicious javascript into a vulnerable site. This vulnerability was being actively exploited when it was discovered.

Detected in:

Product Filter by WBW fixed vulnerable versions: >= * <= 1.4.9
Product Filter for WooCommerce by WBW fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.